Open main menu

CDOT Wiki β

Changes

Temp OPS235 Lab 1

10,177 bytes removed, 20:29, 11 January 2012
no edit summary
==Introduction==
:* In this lab, you are going to install the Fedora (GNU/Linux Distribution) to your removable hard disk from your burned DVD.
First:* Although this will be a simple install, you are going to first create this Fedora Operating System will be a number of hard disk partitions/physical volumes platform for this installation: '''/dev/sda1 other Virtual Machine Fedora installations (300Min future labs)'''. Therefore, '''/dev/sda2 extended partition''', '''/dev/sda5 (300M)'''. Then during your Fedora installation it is very important that you will use take the '''/dev/sda1''' partition for booting time to carefully read and perform ALL steps, and take time to check your computerwork.
During your Fedora :* After performing the Fedora16 DVD installation, you will also be using '''LVM''' (Logical Volume Management) to create '''physical volumes''' (containers) called '''collect baseline information about your Fedora GNU/dev/sda6''', '''/dev/sda7''', '''/dev/sda8'''Linux system, and '''/dev/sda9'''. This storage will be split into various '''Logical Volumes''' (mount points or "main directories"). This perform some post installation approach will allow configuration to prepare your system for the remainder of the user to perform other Fedora installation methods using ''"Virtual Machines"'' in future labs.
After the installation, you will collect baseline information about your Fedora GNU/Linux system, do some post installation configuration to prepare your system for the remainder of the labs, manipulate the '''GRUB''' configuration, and start using the system.==Objectives==
==Objectives==#Perform a GNU/Linux installation using the Fedora 16 distribution#Investigate information during and after the Fedora 16 installation#Perform an upgrade after a recent installation
#To manually create partitions on a hard disk
#To perform a GNU/Linux installation using the Fedora 16 distribution
#To perform boot time customization and configuration
#To obtain network configuration from a DHCP server
#To secure the boot loader by adding password protection
#To investigate GRUB boot loader configuration
==Required Materials(Bring to All Labs)==
* '''Fedora 16 LIVE CD ''' - You can burn this onto a CD-R in the Open Lab* '''Fedora 16 x_64 Installation DVD ''' - You can burn this onto a DVD-R in the Open Lab(or burn image onto a DVD+R if you are using the Freedom Toaster).* '''SATA Hard Disk ''' (the same one used for Lab 1in removable disk tray)* '''USB Memory Stick ''' (minimum 64M)* '''Lab Logbook (Lab1 Reference Sheet)''' (to make notes and observations).
==Prerequisites==
* '''None ''' (First Lab)
==Linux Command Online Reference==
:* [http://linuxmanpages.com/man1/nslookup.1.php nslookup]
:* [http://linuxmanpages.com/man1/wc.1.php wc]
:* [http://linuxmanpages.com/man8/grub.8.php grub]
==Resources on the web==
Additional links to tutorials and HOWTOs:
:* [http://fedora.redhat.com/docs/release-notes/ Fedora Release Notes]
:* [http://docs.fedoraproject.org/installen-guideUS/ Fedora Installation Guide]:* [http://www.gnu.org/software/grub/manual/html_node16/Security.html#Security Protecting Grub]:* [http:/Installation_Guide/opensource.sgi.com/LDP/HOWTO/Kernel-HOWTO/grubconf.html Grub Details and Sample Config]:* [http://www.aspencrypt.com/crypto101_hash.html One-way Hash Function]:* [http://www.dedoimedo.com/computers/grub.html GRUB Tutorial]:* [http://www.securitystats.com/tools/password.php Password Security Fedora 16 Installation Guide]
=Performing Lab 1=
== Instructions ==# Insert your '''removable SATA hard disk''' in the drive tray.# Set your computer's drive selector switch Investigation 1: How to external (since we will be booting from LIVE CD), then power up the computer.# Insert the '''Perform a Fedora 16 LIVE CD''' into the CD/DVD drive.# Reboot the system.# The boot process is completed when you see the GDM Login Screen. Click Install on "Automatic Login" to login as the "Live System User".# We are going to start by opening a terminal window to access our shell environment. Click on Applications --> System Tools --> Terminal to start the terminal.# At the top of the terminal window, you should see the command prompt similar to [liveuser@localhost ~]$ This prompt indicates that it is ready to take your command. The program that is running is called a shell.# At the command prompt, enter the command whoami (all in one word) and press return. This command shows the so-called User Name. Make notes of this user name.# At the command prompt, enter the command pwd and press return. This command shows the so-called present working directory or current working directory. Record the present working directory of the shell running on the terminal window. As we have not yet changed directories this should also be your users home directory. (Also indicated by the ~ character in the prompt)Your Removable Hard Drive ==
{{Admon/important|Using Superuser Privilege|Throughout this course, you may need # Insert your '''removable SATA hard disk''' into the drive tray.# Set your computer's drive selector switch to execute commands using '''external''' (a.k.a ''position #4'').# Power up the privileges of computer and insert the '''Fedora 16 Installation DVD''' into the administrative user CD/DVD drive.# Wait until the Fedora DVD boots (username "root", also called the "superuser"could take a few moments). To switch from your account to the root account, type the command: <code>su</code>
After switching user notice and make note of the change in your shell prompt. Also note the difference {{Admon/important|Boot-up Issues (Fedora16) in output Seneca's Computer labs|If for some reason, the <code>whoami</code> and <code>pwd</code> commands.Fedora16 Installation DVD does not boot:
:* Restart the computer, and '''press the function key F10 to specify the device to boot'Whenever this '' (eg. DVD drive). :* If the user is required, make prompted for a note of itpassword, and determine why superuser privilege is required'''simply press ENTER''' (without typing any password) at the password prompt.:* '''You will need to perform this technique to ensure that Fedora boots from the hard drive (in future labs)'''.:* If you have tried this technique, and the Fedora Installation DVD does not boot, you may have to burn a new Fedora Installation DVD.|}}
<ol> <li value="5">Note the time at the beginning of your installation.</li> <li>When the Fedora16 Installation DVD boots, it will prompt the user to test the media (i.e. DVD) for integrity. Since time is limited for installation in the lab, select '''SKIP'''. On the other hand, if the install did not work, then you are finished using can test out the integrity of the DVD in the root account type exit to return to computer lab during your previous accountspare time. </li> <li>Select the default language ('''English''Avoid using ') in the superuser account unless absolutely necessarynext install screen, because and click '''Next'''.</li> <li>Select the superuser account has unlimited privilege default '''keyboard layout''' and '''Basic Storage Devices''' in the following installation screens.</li> <li>Set your hostname (name of the computer) to <big>'''f16host'''</big> (one word, no space, all lowercase).<br />Record in your lab logbook why you think it is important to set your hostname to this exact name instead of using another name...</li> <li>Set your time zone to '''Toronto'''.</li> <li'''>Root Password: enter a typo can destroy password of your own choosing'''. Pick one that is really, really hard to guess to protect your system.(Recommendation: use the first letter and all the punctuation from a favorite phrase or song verse. For example, "To be or not to be, that is the question!" could become the password "Tbontb,titq!").</li> <li>Select '''Use All Space''', to have the entire disk for the current Fedora16 OS.</li> </ol>{{Admon/important|Previous Contents of Hard Drive will be Erased|If you are using an existing removable Hard Disk from a previous course, you must allow the Installation DVD to "wipe" all previous contents prior to proceeding with this lab (no exceptions). Failure to erase existing contents can cause problems in subsequent labs such as running out of hard disk space...|}}
In some documentation, you {{Admon/important|Using Entire Hard Disk|You may see the command <code>su -</code> used in place of <code>su</code>. The dash argument causes <code>su</code> be "hesitant" to want to go through use the steps entire disk for just one operating system, but we will be using software that would normally be performed when the root user logs in, including will allow us to run virtual machines for other Fedora installs (1) running the startup scripts (such as <code>/etc/profile</code> and <code>/root/.bash_profile</code> and (2) changing to the root userwhile your host system called 's home directory (<code>/root</code>). Note that the root user's home directory (<code>/root</code>) is 'f16host'not'' the same as the root directory of the system (<code>/</code>). It is also in a different directory than the rest of the home directories, which are typically in <code>/home</code> -- the reason for this is that <code>/home</code> is sometimes on a network filesystem shared by another server (as is the case on Matrixrunning), and it's important that the system administrator be able to log in to the system even if the network is not operating normally.|
}}
===Investigation 1 - How do you manually create hard disk partitions?===
 
# Enter the command <code>fdisk -l /dev/sda</code> and describe the output in your log book. The output may be similar to the following:
Disk /dev/sda: 12.0 GB, 12072517632 bytes
255 heads, 63 sectors/track, 1467 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Device Boot Start End Blocks Id System
...
<ol>
<li value="213">Read and study When prompted, make certain to select '''Fresh Install''' in order to erase any previous contents of the hard disk.</li> <li>You will be prompted to confirm the options that you have chosen prior to performing the DVD install. If you are not certain, you can "Go Back". As soon as you are satisfied with your selections, then click '''Write Changes to Disk'''.</li> <li>Record briefly in your lab logbook what activity occurs during this [http:installation process.</li> <li>Select in the next screen the '''Graphical Desktop''' applications, and in the additional repositories section (at the bottom) accept the default settings, then proceed.</tldpli> <li>Add in your lab logbook a brief description of the term "software repository" and what its major purpose serves (what you think it does).orgWe will not add any existing repositories since we are not currently connected to the Internet. Therefore, we will customize the repositories later.</HOWTOli> <li>'''Proceed with the installation. This may take some time'''. Record in your lab log-book the <u>general</Partitionu> steps in the installation process (displayed in the dialog box).</fdisk_partitioningli> <li>When installation is complete, a screen will confirm completion, and ask the user to remove the DVD, and reboot the computer.html reading] about how to use Write in your lab log-book the fdisk command before you go on time it took to the next stepperform this DVD Fedora install.</li> <li>Review Remove the man page for the fdisk commandFedora Installation DVD, and click '''Reboot'''.</li>
</ol>
{{Admon/caution important| Important/warning! Boot-up Issues (Fedora16) in Seneca's Computer labs| The following operation will erase the contents of your hard disk. If you have any useful data stored on your disk, Each time you must back it up first or use another hard disk that does not contain useful data on it. Do not plan on sharing the hard disk with the Windows course! You will be doing lots of tasks that may cause you to lose boot from your data.}}<ol> <li value="4"> Enter the command <code>fdisk /dev/sda</code> to start the removable hard disk partition program.</li><li>At the fdisk command prompt, enter the letter '''p''' to print out the current partition table of the hard disk. If there are any partitions, use the '''d''' option to delete all of them, starting with the highest partition number first.</li><li>At the fdisk command prompt, use the '''n''' and '''t''' commands to create these three partitionsdrive:</li></ol> /dev/sda1 - 300MB (primary, Linux Native) /dev/sda2 - the rest of the hard disk (extended) /dev/sda5 - 300MB (logical, Linux Native) <ol> <li value="7">* Use the '''p''' option the display the new partition and record it in your log book.</li><li>Remember to use the '''w''' option to write the new partitions information instead of the '''q''' option to quit without saving.</li><li>Enter the command <code>fdisk -l /dev/sda</code> again, and view the partition table to confirm that the partitions were properly created.</li><li>Exit the fdisk prompt.</li><li>Close all applications, and shutdown the computer. Make certain to remove the Fedora 16 LIVE CD when prompted.</li></ol>
Answer :* '''Press the Investigation 1 question in your lab log bookfunction key F10 and specify the hard disk device to boot'''<br />(eg. SATA drive). :* If the user is prompted for a password, '''simply press ENTER''' <br />(without typing any password) at the password prompt.}}
<ol> <li value===Investigation 2: How do you install Fedora?==="21">When the system starts, set or accept the time and date default.</li>{{Admon/important | Logical Volume Management | Fedora uses <li>Create a type of storage management called Logical Volume Management (LVM). In LVMuser account for yourself using the same name as your learn account, disk partitions are called Physical Volumes (PVs) and provide storage to create a Volume Group suitable password (VGdo not forget password!). This storage is then split into various Logical Volumes (LVs). The advantage to this scheme is that you can change LV size and you can add and remove PVs after installation. For example</li> <li>Normally, you can add a new disk would want to your system and then increase enable '''Network Time Protocol''', but since we will be experimenting with the size of your existing filesystems using that extra disk spacenetworking turned off in later labs, '''leave it disabled'''. </li> <li> Click on ''Please be careful 'Do Not Send Hardware Profile'''.</li> <li>Finish the post-installation customization, wait for the login screen to enter all LVM information accuratelyappear, including the VG and LV namesthen login to your computer account and your created (i.e.'' We will investigate and manipulate LVM in future labsyour name).}}</li> <li>Proceed to Investigation 2</li> </ol>
{{Admon'''Answer the Investigation 1 observations /note | Installation Time | The installation process will take about 15 minutes to complete when using DVD. Click the Reboot button on the screen to reboot the system after the installation is complete. There is a post installation setup after bootquestions in your lab log book.}}'''
# Set your computer's drive selector switch to external (since we will be booting from LIVE CD), then power up the computer.# Insert the Fedora 16 x86_64 Installation DVD into the DVD drive.# Reboot the system.# After booting from the Installation DVD, at the Welcome Screen choose "Install or upgrade an existing system" to launch the Graphical installation program and select the following options (you can use the media test to verify that your DVD burned correctly -- It will take some time -- otherwise, skip it):#* Language - English#* Keyboard Configuration - U.S. English#* Type of devices: Basic Storage Devices#* There should only be one storage drive listed - select it#* If you get a warning that the drive may need to be initialized, it is because your drive is new and contains no partitition table. Select "Re-Initialize"#* Set your hostname to - f16host (one word, no space, all lowercase)#* Root Password: enter a password of your own choosing. Pick one that is really, really hard to guess to protect your system. (Recommendation: use the first letter and all the punctuation from a favorite phrase or song verse. For example, "To be or not to be, that is the question!" could become the password "Tbontb,titq!").#* Disk Partition Setup - Specify a Custom Layout, and then set up the installation with this configuration==Investigation 2:#** Find your existing 300MB partition (/dev/sda1). Edit this entry so that the mountpoint is /boot How many file packages and is formatted as an ext3 filesystem.#** Don't touch the other existing 300M partition (/dev/sda5).#** Create 4 new LVM Physical Volumes that files are 25000 MB in size. Set the File System Type to Physical Volume (LVM). Should be /dev/sda6 to /dev/sda9.#** Create an LVM Volume Group. Set the Volume Group Name to '''vg_main''' and set the Physical Extent size to '''4MB'''.#** Click on the Add button (within the "Make LVM Volume Group" window) to create a logical volume within that volume group:#*** Mount point / (root), filesystem type ext4, logical volume name '''root''', size 90000MB.#* Say yes to continue without a swap partition.#* Say yes to format /dev/sda1.#* Accept Boot Loader defaults.#* Accept Graphical Desktop and repository defaults.# Proceed with the installation. '''Note how long it takes to perform the installation.'''# Reboot using the controls installed on the screen. When the system starts, it will ask you some final configuration questions.#* Check the License Agreement. What license is used for the Fedora distribution? What activities do have restrictions and obligations?#* Create a user account for yourself using the same name as your learn account.#* Set date and time. Normally, you would want to enable Network Time Protocol, but since we will be experimenting with the networking turned off in later labs, leave it disabled.#* Click on Do Not Send Hardware Profile.#* Finish the post-installation customization, wait for the login screen to appear, and then login to your Learn account.==
Answer '''For the Investigation 2 questions rest of the tasks in this lab, you must login to your installed Fedora system using your Learn account, open a terminal and execute the following listed Linux commands to obtain information for your lab log book-logbook''' (lab1). If you get a Permission Denied message when trying to execute a command, then switch to the '''superuser''' account by running the command '''su -''' and type in your password for "root" (since you are the main administrator for your Fedora system). Once the intended command is executed, type "exit" to exit from the superuser account and return to your regular Learn account.
{{Admon/tip|Forcing the Resolution on the Projector|The podium computers in the lab rooms are connected to a video splitter. This splitter then connects to both the LCD screen on the podium and the projector at the front of the room. However, the splitter prevents the computer from successfully querying the LCD or screen to find the supported resolutions, and Fedora therefore selects a very low (safe) resolution. If you are using a podium system, you can force the native 1680x1050 resolution of the LCD display using [http://matrix.senecac.on.ca/~chris.tyler/fedora-scripts/1680x1050 this script].}}
===Investigation 3{{Admon/important|Using Superuser Privilege|Throughout this course, you may need to execute commands using the privileges of the the administrative user (username "root", also called the "superuser"). To switch from your account to the root account, type the command: How many files packages and files are installed on the system?===<code>su</code>
For the rest After switching user notice and make note of the tasks change in this lab, you must login to your system using your Learn account and execute all commands under your learn accountshell prompt. If you get a Permission Denied message when trying to execute a command, then switch to Also note the superuser account by running the command su - and type difference in the password output for "root". Once the intended command is executed, type "exit" to exit from the superuser account <code>whoami</code> and return to your regular Learn account<code>pwd</code> commands.
Record the commands used '''Whenever this is required, make a note of it, and the output generated in each of the following steps:determine why superuser privilege is required.'''
# To find all the mount points, enter the command: <code>mount</code>#* Study the output and record all the mount points in your log book.# The name of When you are finished using the installation log file is <code>/root/install.log</code> -- It is an ASCII file (how can you be sure?) and can be viewed with the <code>less</code> command. # You can make use of this file account type exit to determine how many packages have been installed: complete the following command return to count the number of packages listed in the installation log file:#* <code>grep ________________ /root/install.log | wc -l</code># Using the <code>rpm</code> command: you can also use the following commands to list all the installed packages, and the total number of packages installed:#* <code>rpm -q -a</code>#* <code>rpm -q -a | wc -l</code>#* <code>rpm -qa | wc -l</code># The <code>-q</code> option means query, and the <code>-a</code> option means all (in other words, query all installed software packages). Did you get the same number of packages from the above two methods?# Some of the files on your system were installed with the software packages, and some were created by system activity (for example, by creating your Learn previous account and by logging in). If you know '''Avoid using the package name (from the <code>install.log</code>)superuser account unless absolutely necessary, you can list all because the files that were installed from the package by using the following command:#* <code>rpm -q -l package_name</code># This combines the <code>-q</code> (query) option with the <code>-l</code> (list filenames) option.# You can pipe the outupt through <code>wc -l</code> to count the number of lines:#* <code>rpm -ql package_name| wc -l</code># Using what you learned in steps 3, 4, superuser account has unlimited privilege and 8, get a count of the total number of files installed by all of the software packages on typo can destroy your system.# To find out the name that you have assigned to your Linux system, enter the command: <code>hostname</code># To find out the kernel version of your GNU/Linux workstation and the date it was created, enter the command: <code>uname -r</code># To find out all the system processes running on your GNU/Linux workstation, enter the command: <code>ps -ef</code># To capture the list of all the system processes to a file called <code>ps.lst</code>, enter the command: <code>ps -ef > ps.lst''</code># Copy the installation log file <code>/root/install.log</code> and the file ps.lst to a USB memory key, or scp to your matrix account as a backup.'
{{Admon/tip |Updating Fedora|The Fedora 16 software is updated frequently to add featuresIn some documentation, fix bugs, and upgrade security. Perform a system update to get you may see the latest versions command <code>su -</code> used in place of the packages installed in Fedora: Start the Firefox web browser, turn off popup window blocking (select ''Edit<code>su</code>Preferences'', then select the Content tab and uncheck the box to Block Popups), then login to SeneNET. Open a terminal and type The dash argument causes <code>su</code> to start a shell as go through the steps that would normally be performed when the root. Enter user logs in, including (1) running the command startup scripts (such as<code>yum update/etc/profile</code> This will download and install all of the packages that have been updated since the installation DVD image was created<code>/root/. If you complete this command at Seneca it should run quite fast as Seneca College hosts a Fedora Repository mirror bash_profile</code> and (a copy of all of 2) changing to the current fedora packages, on a local web serverroot user's home directory (<code>/root</code>).}}
=== Investigation 4: What Note that the root user's home directory (<code>/root</code>) is ''not'' the same as the root directory of the system (<code>/</code>). It is also in a different directory than the rest of the home directories, which are typically in <code>/home</code> -- the reason for this is that <code>/home</code> is sometimes on a runlevel? ===network filesystem shared by another server (as is the case on Matrix), and it's important that the system administrator be able to log in to the system even if the network is not operating normally.}}
After the kernel boots, it starts a single program, called <code>init</code>. A running instance of a program is called a '''process''' -- the init process always has a process ID (PID) of 1. All other processes on the system are started by init, or they are started by processes started by init.
Most current Linux systems use some variation of the init Navigate through your Graphical Fedora system originally developed for Unix System V , '''locate and run a terminal program (called "sysvinit"in order to issue Linux commands) or a newer version called "upstart".Issue and record the commands used and the output generated in each of the following steps:'''
These systems employ # The name of the concept of "runlevels" installation log file is <code>/root/install.log</code> -- groups of software that It is an ASCII file (how can you be sure?) which can be selected, so that viewed with the system <code>less</code> command. # You can be run make use of this file to determine how many packages have been installed: complete the following command to count the number of packages listed in various modesthe installation log file::: <code>grep ________________ /root/install. In Fedora systems, these runlevels are used:log | wc -l</code><ol>{|class <li value="mediawiki" border="13">Using the <code>rpm</code> command: you can also use the following commands to list all the installed packages, and the total number of packages installed:</li>!Runlevel</ol>!Description|:: <code>rpm -|0|Halt (powers off the system)|q -a</code>|1|Single:: <code>rpm -user maintenance mode, network not running, characterq -mode displaya |wc -l</code>|2|''Not normally used - originally meant: Multi-user mode, network not running, character: <code>rpm -mode display''qa |wc -l</code>|3<ol>|Multi <li value="4">The <code>-user modeq</code> option means query, network runningand the <code>-a</code> option means all (in other words, character-mode displayquery all installed software packages). Did you get the same number of packages from the above two methods?</li>|- <li>Some of the files on your system were installed with the software packages, and some were created by system activity (for example, by creating your Learn account and by logging in). If you know the package name (from the <code>install.log</code>), you can list all the files that were installed from the package by using the following command:</li>|4</ol>|''Not normally used''|:: <code>rpm -|5|Multiq -user mode, network running, graphical user interfacel package_name</code>|-<ol>| <li value="6|Reboot|} {{Admon">This combines the <code>-q</note|Different runlevel systems|Various Linux distributions may use code> (query) option with the runlevel numbers differently. For example, on some Debian<code>-l</Ubuntu systems, the default code> (standardlist filenames) runlevel is 2.}}option</li> In order <li>You can pipe the outupt through <code>wc -l</code> to implement runlevels, init uses a configuration file and a count the number of script fileslines:</li></ol>* :: <code>/etc/inittabrpm -ql package_name| wc -l</code> is <ol> <li value="8">Using what you learned in steps 3, 4, and 8, get a count of the configuration file, which sets total number of files installed by all of the default runlevelsoftware packages on your system.</li>* <li>To find out the name that you have assigned to your Linux system, enter the command: <code>hostname</etccode></rc.dli><li>To find out the kernel version of your GNU/init.dLinux workstation and the date it was created, enter the command: <code>uname -r</code> is a directory of scripts.</li> In order to determine which of <li>To find out all the startup scripts should be executed in each runlevelsystem processes running on your GNU/Linux workstation, enter the one directory per runlevel is created (command: <code>ps -ef</etccode></rcli><li>To capture the list of all the system processes to a file called <code>ps.dlst</rc'''X'code>, enter the command: <code>ps -ef > ps.lst''</code></li><li>Copy the installation log file <code>/root/install.dlog</code>and the file ps.lst to a USB memory key, where or scp to your matrix account as a backup.</li><li>View the section below to learn about and perform an update on your fresh Fedora16 install (you may have to find spare time to perform this install if you are running short on lab time). '''XDo <u>not</u> proceed to Investigation 3 without performing an update''' is the runlevel). This directory is filled with symbolic links to the startup scripts in <code/li>/etc/rc.d/init.d</codeol>
# To find out the value of the runlevel your GNU{{Admon/Linux tip |Updating Fedora|The Fedora 16 software is updated frequently to add features, fix bugs, and upgrade security. '''Perform a system goes into after boot, enter the command: <code>grep initdefault /etc/inittab</code># You should update to get a single line containing ":" as the field delimiter. The second field stores the value latest versions of the runlevel the init process will use after a reboot. Record the output in your log book.# A list of processes that should be running at a given runlevel can be found packages installed in Fedora: Start the directory <code>/etc/rc.d/rcFirefox web browser, turn off popup window blocking (select '''X'''.d</codeEdit> where Preferences'''X''' is , then select the runlevel. Do a directory listing of that directory Content tab and study what files are in there. Pay attention uncheck the box to the first three characters of each file name. They have special meaning Block Popups), then login to the system. Record your observation in your log bookSeneNET.# Make Open a backup of the file /etc/inittab with the command: terminal and type <code>cp /etc/inittab /etc/inittab.originalsu</code># Edit to start a shell as root. Enter the file command <code>/etc/inittabyum update</code> ''' This will download and change install all of the default runlevel to 3. Save packages that have been updated since the change and reboot your systeminstallation DVD image was created.# After the reboot, If you complete this command at Seneca it should get run quite fast as Seneca College hosts a Fedora Repository mirror (a "Text Login Screen". Login with your Learn account and type startx at the command prompt. Describe what happens in your log book.# Enter the command: <code>runlevel</code> -- this shows copy of all of the previous and current runlevel. Record the values in your bookfedora packages, on a local web server).}}
'''Answer the Investigation 2 observations / questions in your lab log book.'''
Answer the Investigation 4 questions in your lab log book. === Investigation 53: What is the network configuration? ===
# To check the network configuration settings obtained from the DHCP server, run the following commands, describing the output in your log book:
#* '''ifconfig'''#* '''route'''#* '''netstat -rn'''#* '''nslookup ''' (at the > prompt, enter the word "server" (do not type the quotes) and record the output. Type exit to leave nslookup).<br /><br />
# Find the following information in the output of the above commands:
#* '''MAC address ''' (physical or hardware address) of the ethernet network interface#* '''The IP address ''' (logical address) assigned by the DHCP server#* '''The default route ''' (gateway)#* '''The DNS nameserver'''
'''Answer the Investigation 5 3 observations / questions in your lab log book.'''
=== Investigation 6: How do You Secure the Grub Boot Loader? ===
{{Admon/caution|Duplicate UUIDs|Before proceeding, use the <code>mount</code> command to check to see which filesystem is mounted on the mount point <code>/boot</code>. If it is <code>/dev/sda5</code>, it is the wrong filesystem. This may be caused by a duplication of serial numbers which is the result of Lab 1; you can fix this problem with this series of commands:
mkdir /media/sda5 /tmp/sda5-files
umount /dev/sda5
mount /dev/sda5 /media/sda5
cp -v -R /media/sda5/* /tmp/sda5-files
umount /dev/sda5
mkfs -t ext3 /dev/sda5
mount /dev/sda5 /media/sda5
cp -v -R /tmp/sda5-files/* /media/sda5
rm -rf /tmp/sda5-files
mount -a
}}
By default, = Completing the Grub boot loader allows anyone with access to the computer at boot time to set the runlevel, or change the boot parameters, which can allow them to influence the init process and which kernel image is loaded. Anyone with access to the boot prompt can therefore bypass security controls and control which software is loaded. For example, rebooting to runlevel 1, known as single user mode, gives the user root priveleges without the need for a password! Obviously, giving a non-administrator this much control can be dangerous, and it is wise to protect the boot loader with a secure password. Lab =
We will need to choose a password, encrypt with the grub programs hash utility (called md5crypt), and add '''Check off the encrypted hash of following items before asking your password instructor to the grub configuration file, /etc/grub.confcheck your lab:'''
{{Admon* '''Task 1''' - Install GNU/important|Do not lose the GRUB password|If you lose the GRUB password you will not be able to change boot parameters when you boot the Linux Workstation using Fedora * '''Task 2''' - Collect systeminformation after installation. If you need to write it down, put it in a safe place, where no one will be able to tell what it is for.}}* '''Task 3''' - Fedora Updated* '''Task 4''' - Collect network information
# Choose a suitable password. # Open the grub program by typing the command: <code>grub</code># At the grub prompt, type in the command: <code>md5crypt</code># When prompted '''Arrange evidence for a password, carefully type in your password. The program will display the encrypted hash each of these items on your password. Carefully write down that encrypted hash generated by the program.# Type the command: <code>quit</code> to exit the grub program.# Open the grub configuration filescreen, <code>/etc/grub.conf</code> for editing. (This file is actually linked then ask your instructor to /boot/grub/grub.conf).# Carefully add review them and sign off on the line: <code>password --md5 lab''password-hash''</code> (notes completion: ''password-hash'' is the hash you generated with md5crypt) Place this line between the splashimage line and the title line. If there are other lines there, there is no need to remove them. Just insert your password line as a new line.# Make sure you have not made a mistake. What you type in must match exactly the output from the md5crypt command.# While you are editing the file you should also increase the timeout for grub to automatically boot the default OS. Edit the line <code>timeout=0</code> to <code>timeout=5</code> to give us more time to interrupt the process.# You should also ensure that the grub boot menu is not hidden. Add a hash sign (<code>#</code>) to the start of the line which reads: <code>hiddenmenu</code># Save the file and exit. Your Grub boot loader is now password protected.# Find the section of [http://fedorasolved.org/post-install-solutions/runlevel this article] that explains how to change the runlevel at boot time, and read it. Reboot your system, trying to change to runlevel 1 from the boot prompt, and see if the password protection worked.# From now on, when you want to change boot parameters when you boot, you must type lowercase <code>p</code> at the boot prompt and enter the required password.
== Completing the Lab ==
 
Check off the following items before asking your instructor to check your lab:
 
* Task 1 - Created correct partitions in /dev/sda
* Task 2 - Install GNU/Linux Workstation using Fedora
* Task 3 - Collect system information after installation.
* Task 4 - Customize and configure boot time environment
* Task 5 - Collect network information
* Task 6 - Password protect Grub Bootloader
 
Arrange evidence for each of these items on your screen, then ask your instructor to review them and sign off on the lab's completion:
 
* Issue command '''fdisk /dev/sda''', and use '''p''' command to display partitions
* Grub is password protected.
* Can login with your "learn" account name
* Has all the mount points
* Has the package count
* Has edited the default runlevel
* Has the correct IP address and MAC address
* Find out the default route (gateway)
* IP of the DNS name server
* '''Name and contact information on your disk pack''' 
{{Admon/tip|Runlevel|Feel free to change your default runlevel to 3 or 5 according to your own personal preference. Note that later labs may assume a particular runlevel.}}
== Preparing for the Quizzes ==
# How many packages were installed?
# How many files (correct to the nearest hundred) were installed?
# How many mount points were used?
# How many users were created automatically on your system (do not count your learn account)?
# What is your learn account's UID and GID?
# How do you determine the host name of your GNU/Linux workstation?
# What command can display the NIC's MAC address?
# Which file contains the default "runlevel" value for your GNU/Linux workstation?
{{Admon/important|Unbind your MAC address|Before moving your disk pack to another system, [[Unbinding MAC Addresses on Fedora|unbind your MAC address]].}}
13,420
edits